# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1089 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1090 --- ## [About the 7.x version of the search.max\_buckets parameter](https://discuss.elastic.co/t/about-the-7-x-version-of-the-search-max-buckets-parameter/260512)
**Author:** [@liwanjie](https://discuss.elastic.co/u/liwanjie)\ **Replies:** 2\ **Last updated:** [January 11, 2021, 7:04am UTC](https://discuss.elastic.co/t/about-the-7-x-version-of-the-search-max-buckets-parameter/260512 "2021-01-11T07:04:58Z")
I would like to ask if the check\_buckets\_step\_size parameter is added in 7.7.0. Has the max\_bucketsparameter been repealed in subsequent releases (including the latest 7.10.0)? If not repealed, are there any defaults? --- ## [Field.keyword empty in Discover](https://discuss.elastic.co/t/field-keyword-empty-in-discover/260534)
**Author:** [@HerveSavard](https://discuss.elastic.co/u/HerveSavard)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 6:52am UTC](https://discuss.elastic.co/t/field-keyword-empty-in-discover/260534 "2021-01-11T06:52:56Z")
Hello All, In Discover, i see all my value do i need. sysvalval 2 When i add a filter like sysvalval.keyword the list of value is empty. I use Kibana version v7.10 Many thanks in advance --- ## [Logstash doesnt start after upgrade to 6.8.13 (from 6.2.3)](https://discuss.elastic.co/t/logstash-doesnt-start-after-upgrade-to-6-8-13-from-6-2-3/260599)
**Author:** [@cfu](https://discuss.elastic.co/u/cfu)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 6:39am UTC](https://discuss.elastic.co/t/logstash-doesnt-start-after-upgrade-to-6-8-13-from-6-2-3/260599 "2021-01-11T06:39:26Z")
After upgrading logstash 6.3.2 to 6.8.13 it doesn´t start. Looking into the log file shows: \[2021-01-09T11:24:12,770\]\[DEBUG\]\[logstash.modules.scaffold\] Found module {:module\_name=\>"fb\_apache", :directory=\>"/products/el… --- ## [Elasticsearch index error](https://discuss.elastic.co/t/elasticsearch-index-error/260634)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 4\ **Last updated:** [January 11, 2021, 6:06am UTC](https://discuss.elastic.co/t/elasticsearch-index-error/260634 "2021-01-11T06:06:30Z")
elasticsearch.yml network.host: localhost http.port: 9200 transport.host: localhost transport.tcp.port: 9300 discovery.seed\_hosts: localhost:9300 cluster.initial\_master\_nodes: ${HOSTNAME} action.auto\_create\_inde… --- ## [Logs are no longer sent to elasticsearch](https://discuss.elastic.co/t/logs-are-no-longer-sent-to-elasticsearch/260378)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 4:46am UTC](https://discuss.elastic.co/t/logs-are-no-longer-sent-to-elasticsearch/260378 "2021-01-11T04:46:20Z")
I receive the logs in logstash, but the logs are no longer sent to elasticsearch. Can you help me? Below are the logs in logstash: \[root@scs90104vu logstash\]# tail -f /var/log/logstash/logstash-plain.log \[2021-01-06T… --- ## [Error when importing data from maraidb](https://discuss.elastic.co/t/error-when-importing-data-from-maraidb/260665)
**Author:** [@Tails](https://discuss.elastic.co/u/Tails)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 4:07am UTC](https://discuss.elastic.co/t/error-when-importing-data-from-maraidb/260665 "2021-01-11T04:07:08Z")
I installed the ik plugin to elasticsearch and I have the following errors when importing from mariadb. \[2021-01-11T11:49:38,392\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[6611aaa54ebe00de3255376c35e28d779a2b6f627197… --- ## [Set \_type in logstash](https://discuss.elastic.co/t/set-type-in-logstash/260643)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 2\ **Last updated:** [January 11, 2021, 1:21am UTC](https://discuss.elastic.co/t/set-type-in-logstash/260643 "2021-01-11T01:21:57Z")
Hi experts. As per my research index (Elastic Search) -\> database (RDMS) type (Elastic Search) -\> table (RDMS) Can i know how i can set the type? input { beats { port =\> 5044 ... type =\> "%{\[fields\]\[na… --- ## [Object field vs Individual field](https://discuss.elastic.co/t/object-field-vs-individual-field/260527)
**Author:** [@naghaveer\_r](https://discuss.elastic.co/u/naghaveer_r)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 12:22am UTC](https://discuss.elastic.co/t/object-field-vs-individual-field/260527 "2021-01-11T00:22:19Z")
I have two fields "support.agent" and "support.resolution". If I can map these field as an Object type, I'll be able to fetch them together and also provides more readability "support": { "properties": { … --- ## [Custom data format not working in elasticsearch](https://discuss.elastic.co/t/custom-data-format-not-working-in-elasticsearch/260530)
**Author:** [@gavin-orange](https://discuss.elastic.co/u/gavin-orange)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 12:20am UTC](https://discuss.elastic.co/t/custom-data-format-not-working-in-elasticsearch/260530 "2021-01-11T00:20:57Z")
I am using the filebeat to transfer nginx access log to elasticsearch with json format . access.log { "@timestamp": "05/Jan/2021:13:38:28 +0800", "pid": "52336", "connection": "217062444", "connection\_requests": "18", … --- ## [ES 7.9.1 - No Lens option](https://discuss.elastic.co/t/es-7-9-1-no-lens-option/260538)
**Author:** [@iam\_rob](https://discuss.elastic.co/u/iam_rob)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 12:18am UTC](https://discuss.elastic.co/t/es-7-9-1-no-lens-option/260538 "2021-01-11T00:18:58Z")
Good morning, We're currently investigating Kibana as a solution. Locally I am running 7.9.2 and when creating a new Visualizations I can select Lens. On our AWS version (7.9.1) we don't appear to have this option. How… --- ## [Elastic 5 \> 7: Decrease Storage Usage?](https://discuss.elastic.co/t/elastic-5-7-decrease-storage-usage/260594)
**Author:** [@myspacebarisbroken](https://discuss.elastic.co/u/myspacebarisbroken)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 12:15am UTC](https://discuss.elastic.co/t/elastic-5-7-decrease-storage-usage/260594 "2021-01-11T00:15:54Z")
Hi! I'm upgrading my ES cluster from V 5 to V7, I've noticed that space usage has significantly been reduced, is that normal? my V5 cluster: 10B Documents, ~2.2 TB V7 Cluster: 10B Documents, ~1.5 TB (Same exact docum… --- ## [java.lang.OutOfMemoryError: Java heap space in Logstash](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-in-logstash/260596)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 12:13am UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-in-logstash/260596 "2021-01-11T00:13:43Z")
I have too many configuration files. I run these files together via pipelines.yml. I use these types of settings likewise below; - pipeline.id: pipeline1 path.config: "path\_to\_pipeline1" - pipeline.id: pipeline2 pat… --- ## [How to configure rolling OR delete after X time of data dir , to prevent "out of space" error](https://discuss.elastic.co/t/how-to-configure-rolling-or-delete-after-x-time-of-data-dir-to-prevent-out-of-space-error/260639)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 12:10am UTC](https://discuss.elastic.co/t/how-to-configure-rolling-or-delete-after-x-time-of-data-dir-to-prevent-out-of-space-error/260639 "2021-01-11T00:10:10Z")
i configured the cluster to claim 5g for the data dir volumeClaimTemplates: - metadata: name: elasticsearch-data spec: accessModes: - ReadWriteOnce resources: requ… --- ## [Filebeat fields value unable to use it in logstash configuration file](https://discuss.elastic.co/t/filebeat-fields-value-unable-to-use-it-in-logstash-configuration-file/260614)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 8\ **Last updated:** [January 10, 2021, 11:20pm UTC](https://discuss.elastic.co/t/filebeat-fields-value-unable-to-use-it-in-logstash-configuration-file/260614 "2021-01-10T23:20:24Z")
I have set custom name in filebeat input section. However, in logstash configuration file it was unable to be use Filebeat config file - type: log enabled: true paths: ... fields: - name\_of\_index: group-1… --- ## [Multi-Tenancy and Indexes / Aliases / Routing](https://discuss.elastic.co/t/multi-tenancy-and-indexes-aliases-routing/260655)
**Author:** [@nickdb93](https://discuss.elastic.co/u/nickdb93)\ **Replies:** 0\ **Last updated:** [January 10, 2021, 6:16pm UTC](https://discuss.elastic.co/t/multi-tenancy-and-indexes-aliases-routing/260655 "2021-01-10T18:16:31Z")
I know that how one deals with multi-tenancy is really based on use-case, but I just cannot seem to figure out the best approach to take, even after reading some examples. My use case is as such. Organizations are te… --- ## [How could I use in ingest pipeline the Logstash translate filter?](https://discuss.elastic.co/t/how-could-i-use-in-ingest-pipeline-the-logstash-translate-filter/259697)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 4\ **Last updated:** [January 10, 2021, 2:36pm UTC](https://discuss.elastic.co/t/how-could-i-use-in-ingest-pipeline-the-logstash-translate-filter/259697 "2021-01-10T14:36:32Z")
I have a field with some error codes mapped as keyword values that I make some plots. It's not friendly to some people to look at these codes, so I want to change these error codes to a description that I will map as key… --- ## [Kibana TSVB table visualization - group by multiple fields](https://discuss.elastic.co/t/kibana-tsvb-table-visualization-group-by-multiple-fields/260631)
**Author:** [@igorid70](https://discuss.elastic.co/u/igorid70)\ **Replies:** 1\ **Last updated:** [January 10, 2021, 1:21pm UTC](https://discuss.elastic.co/t/kibana-tsvb-table-visualization-group-by-multiple-fields/260631 "2021-01-10T13:21:42Z")
Hi I am using Elastic stack 7.9.1 and trying to build a visualization in Kibana with time series visual builder. In our environment we monitor multiple hosts and one of the visualizations on a dashboard should present … --- ## [Weird memory growth (ES 7.9)](https://discuss.elastic.co/t/weird-memory-growth-es-7-9/260479)
**Author:** [@zanettea](https://discuss.elastic.co/u/zanettea)\ **Replies:** 2\ **Last updated:** [January 10, 2021, 12:12pm UTC](https://discuss.elastic.co/t/weird-memory-growth-es-7-9/260479 "2021-01-10T12:12:53Z")
Hello, we are experiencing anomalous memory usage in a memory constrained cluster of 3 nodes running ES 7.9. We set 2GB heap size with 4 GB overall available RAM. After some days of normal operation where there are mainl… --- ## [Mapping data, tokenizer](https://discuss.elastic.co/t/mapping-data-tokenizer/260629)
**Author:** [@Jaroslav\_Zeman](https://discuss.elastic.co/u/Jaroslav_Zeman)\ **Replies:** 2\ **Last updated:** [January 10, 2021, 11:06am UTC](https://discuss.elastic.co/t/mapping-data-tokenizer/260629 "2021-01-10T11:06:26Z")
Hi I am a beginner in using elasticsearch, and I have a few questions on how best to store the data in elasticsearch with respect to the maximum search speed. In the relational database, I have the following three enti… --- ## [Increasing ‘index.mapping.nested\_objects.limit’ setting](https://discuss.elastic.co/t/increasing-index-mapping-nested-objects-limit-setting/260633)
**Author:** [@kliakos](https://discuss.elastic.co/u/kliakos)\ **Replies:** 0\ **Last updated:** [January 10, 2021, 9:11am UTC](https://discuss.elastic.co/t/increasing-index-mapping-nested-objects-limit-setting/260633 "2021-01-10T09:11:46Z")
I have the same problem as this https://discuss.elastic.co/t/increasing-index-mapping-nested-objects-limit-settings-value-has-no-effect/228242. The new setting, although applied to the index, doesn't seem to have any ef… --- ## [Logstash high CPU on JDBC plugin](https://discuss.elastic.co/t/logstash-high-cpu-on-jdbc-plugin/260610)
**Author:** [@Kevin\_Juliano](https://discuss.elastic.co/u/Kevin_Juliano)\ **Replies:** 1\ **Last updated:** [January 10, 2021, 2:08am UTC](https://discuss.elastic.co/t/logstash-high-cpu-on-jdbc-plugin/260610 "2021-01-10T02:08:40Z")
Hi! I am running Logstash with JDBC plugin postgreSQL, as I check the performance of our server, because I are having some timeout issues, I found out that Logstash when running is having more than 100% CPU usage. Wh… --- ## [Amazon Linux 2 server monitoring](https://discuss.elastic.co/t/amazon-linux-2-server-monitoring/260568)
**Author:** [@Sergey\_Kuyanov](https://discuss.elastic.co/u/Sergey_Kuyanov)\ **Replies:** 5\ **Last updated:** [January 9, 2021, 11:08pm UTC](https://discuss.elastic.co/t/amazon-linux-2-server-monitoring/260568 "2021-01-09T23:08:59Z")
Hello. I am new in Kibana. The problem is that I installed an ELK stack on the Ubuntu 20.04 server. I have no problem getting any logs from all of my other servers regardless of the operating system they are using. Ho… --- ## [Moving elasticsearch storage directory](https://discuss.elastic.co/t/moving-elasticsearch-storage-directory/260611)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 2\ **Last updated:** [January 9, 2021, 5:45pm UTC](https://discuss.elastic.co/t/moving-elasticsearch-storage-directory/260611 "2021-01-09T17:45:15Z")
I've been using the elastic stack for last one year to capture research data (mainly using honeypots hosted on cloud service providers.) I'm using a three-node cluster to capture the data. 2 nodes are data nodes 1 nod… --- ## [How to sent syslog from mikrotik to ELK](https://discuss.elastic.co/t/how-to-sent-syslog-from-mikrotik-to-elk/260601)
**Author:** [@Zhamax](https://discuss.elastic.co/u/Zhamax)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 3:46pm UTC](https://discuss.elastic.co/t/how-to-sent-syslog-from-mikrotik-to-elk/260601 "2021-01-09T15:46:26Z")
Hi everyone i have some questions to ask. i want to sent syslog from mikrotik to Elastic But I'm confused about how to write code into Input, Filter and output ? Thank you in advance for your help --- ## [Logstash Database pipeline resiliency](https://discuss.elastic.co/t/logstash-database-pipeline-resiliency/260608)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 3\ **Last updated:** [January 9, 2021, 3:28pm UTC](https://discuss.elastic.co/t/logstash-database-pipeline-resiliency/260608 "2021-01-09T15:28:24Z")
Hello Team, I have a use case where Ineed to deploy database pipeline on 2 nodes, but i want to implement in a way that if one node(machine) goes down then only 2nd will pick up from that point and until the second goes… --- ## [Shards failure](https://discuss.elastic.co/t/shards-failure/258185)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 3:17pm UTC](https://discuss.elastic.co/t/shards-failure/258185 "2021-01-09T15:17:25Z")
Here is what I am seeing: How do I resolve this? --- ## [TSVB - Top N - Item URL: keep time interval when link to other dashboard](https://discuss.elastic.co/t/tsvb-top-n-item-url-keep-time-interval-when-link-to-other-dashboard/260598)
**Author:** [@anja1](https://discuss.elastic.co/u/anja1)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 12:46pm UTC](https://discuss.elastic.co/t/tsvb-top-n-item-url-keep-time-interval-when-link-to-other-dashboard/260598 "2021-01-09T12:46:50Z")
I´m using the "item url" in TSVB visualization to link to another dashboard. In the new dashboard the search is already filled with the value of "{{key}}" (thats ok). When link to another dashboard I also want to keep… --- ## [5.6 \> 7.9 upgrade, auto\_generate\_phrase\_query alternatives?](https://discuss.elastic.co/t/5-6-7-9-upgrade-auto-generate-phrase-query-alternatives/260164)
**Author:** [@myspacebarisbroken](https://discuss.elastic.co/u/myspacebarisbroken)\ **Replies:** 3\ **Last updated:** [January 9, 2021, 7:26am UTC](https://discuss.elastic.co/t/5-6-7-9-upgrade-auto-generate-phrase-query-alternatives/260164 "2021-01-09T07:26:16Z")
Hello, I'm upgrading my codebase's ElasticSearch from 5.6 to 7.x due to some features I'd like to explore. I'm currently using GoLang & "github.com/olivere/elastic/v5" specifically. However, auto\_generate\_phrase\_query… --- ## [Performance impacts of track\_scores on sorted queries](https://discuss.elastic.co/t/performance-impacts-of-track-scores-on-sorted-queries/260578)
**Author:** [@AlanN](https://discuss.elastic.co/u/AlanN)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 6:57am UTC](https://discuss.elastic.co/t/performance-impacts-of-track-scores-on-sorted-queries/260578 "2021-01-09T06:57:12Z")
Hi, I'm attempting to wrap my head around what the performance hit is on queries with and without the track\_scores flag flipped in the sort during queries in our ElasticSearch 6.8 cluster. Unfortunately it's pretty bus… --- ## ["ecctl user list" で "The requested resource could not be found." エラーが発生](https://discuss.elastic.co/t/ecctl-user-list-the-requested-resource-could-not-be-found/260315)
**Author:** [@miz21358](https://discuss.elastic.co/u/miz21358)\ **Replies:** 5\ **Last updated:** [January 9, 2021, 5:53am UTC](https://discuss.elastic.co/t/ecctl-user-list-the-requested-resource-could-not-be-found/260315 "2021-01-09T05:53:05Z")
Elastic Cloud 内のKibana閲覧ユーザーとそのロールをecctlコマンドでコントロールしたいと考えております。 ecctlコマンド自体のインストールは成功して、"ecctl deployment list" コマンドは動いたのですが、"ecctl user list"を実行したところ、エラーが発生しました。 xxxxx@xxxx:~/.ecctl$ ecctl user list --verbose --ve… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1088) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1090)